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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

Listing of Claims: 

1 . (Currently amended) A method for providing a user device with a set of access codes, the 
method comprising: 

receiving from a user device a first message requesting a set of access codes, 
wherein the user device tracks its own access code usage and compares a number of unused 
access codes to a predetermined threshold level after each use: 

said first message comprising an identification code associated with an encryption 
key stored in the user device, wherein the first message is sent via a communications network; 

storing an encryption key corresponding to the encryption key and the identification 
code stored in the user device, 

allocating the set of access codes on receipt of the identification code from the user 

device, 

performing a look up function based on the identification code received in the 
message to retrieve the encryption key from storage, 

encrypting the set of access codes using the retrieved encryption key to produce an 
encrypted set, and 

sending a second message containing the encrypted set to the user device for storingt 
aad^ upon a number of unused access codes for the user device reaching a prodetorminod 
threshold^ sending a third message containing a now sot of aoooss codes to the user device via the 

wherein the now sot of access codes are encrj^ted with the encryption key associated with 
the identification code . 
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2.-41. (Canceled) 

42. (Canceled) 

43. (Previously presented) The method of claim 1 further comprising: 

tracking the access codes used by the user device, and 

sending the new set of access codes to the user device in response to the number of unused 
access codes reaching a predetermined threshold. 

44. (Currently amended) The method of claim [[42]] 1 wherein the request is sent from the 
user device responsive to a manual input from the user. 

45. (Currently amended) The method of claim 1 fiirther comprising: 

receiving from the user device a fourth third m essage comprising a public key of a 
public/private key pair generated at the user device; 
generating a session key; 

encrypting the set of access codes with the session key to produce a session key encrypted 

set; 

encrypting the session key with the public key to produce an encrypted session key; and 
sending a message containing the session key encrypted set and the encrypted session key 
to the user device via the network. 
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